$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc5bb9e5-17c0-3b9e-9eaf-f388c5844d8f.roa File: cc5bb9e5-17c0-3b9e-9eaf-f388c5844d8f.roa (raw, json) Hash identifier: 86sxbe9qt6KYnTjh1SIhgmL9uiexdMMBVnKsdJqHmOk= Subject key identifier: AF:18:25:7E:BD:48:CA:7F:AD:91:34:10:D9:FA:64:8C:24:5E:EA:7A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F4F07EDB0BF38565B1B129340 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc5bb9e5-17c0-3b9e-9eaf-f388c5844d8f.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 22677 IP address blocks: 172.221.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:ed:b0:bf:38:56:5b:1b:12:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=a475a482-6582-41c3-826a-a61a75137c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:0f:cc:e4:3b:a1:f9:9c:d6:98:fd:79:c8: ca:1f:f9:54:41:a7:0a:75:70:67:0d:80:30:56:44: 3e:27:b8:c9:25:f6:a6:12:de:dc:19:d5:82:f0:b5: 6d:d2:82:d6:50:74:6d:39:97:29:9b:39:30:72:bf: 1a:61:84:04:cc:8e:6c:f4:f1:7b:d5:c7:b2:5d:08: fb:ed:e1:69:04:7a:11:cc:0f:57:5a:78:6c:ac:64: fc:2f:99:b5:b1:72:fd:58:62:25:15:1d:ef:06:83: 09:10:c9:82:38:36:7b:c4:80:a9:51:0b:76:c0:47: 81:1d:98:b7:93:f3:40:3f:8d:c4:ec:38:68:a0:be: a4:58:d7:a7:f4:a9:77:a5:f7:c0:95:1b:97:60:7f: f4:55:f9:f1:95:97:57:04:d1:f5:96:03:53:8a:86: 31:61:e5:ff:8f:6f:a4:7d:0e:ad:1d:88:ba:db:1a: 5d:22:49:f5:03:8c:e6:93:d2:a6:a7:12:7e:f3:a6: 75:c5:4f:70:f7:b4:59:2d:35:57:e7:a6:3a:38:96: 0f:20:69:07:93:04:b4:25:cb:0d:47:4f:d5:f3:d9: 36:87:32:b8:22:88:ec:8c:db:5f:74:d9:26:44:06: ad:58:a0:0f:0c:59:bf:71:39:fc:76:14:65:06:52: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:25:7E:BD:48:CA:7F:AD:91:34:10:D9:FA:64:8C:24:5E:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc5bb9e5-17c0-3b9e-9eaf-f388c5844d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ba:cf:44:71:59:1a:4c:37:dd:59:46:b3:3a:cf:b4:95:87: fa:2b:57:4f:17:5d:f0:45:61:5e:c5:c5:53:46:4a:fe:25:a7: 79:f8:28:18:a9:5c:60:1e:8c:14:73:a7:91:a0:80:8e:ea:a2: 44:3b:8d:fb:a8:03:0a:b9:90:e5:fa:cb:36:2a:98:4a:f3:4a: 58:33:94:66:a2:b3:ae:96:4f:fd:e7:71:01:a3:82:bb:d1:5f: 79:53:3c:7e:27:e0:98:93:4d:9b:d2:62:e4:4a:33:c5:51:51: 05:33:f0:5f:61:bf:c8:fe:c5:0c:ad:48:09:96:29:28:28:39: 7a:f6:fb:4f:75:f4:9c:a2:ec:96:eb:f6:06:4f:0b:b2:9e:e3: 6a:6e:0d:2a:a6:d2:62:e9:23:0c:e9:7a:91:c1:1d:49:12:7d: 16:18:22:03:5e:24:fa:b6:6a:21:17:90:93:2e:48:24:1c:0f: 95:bc:c3:32:b3:79:e4:0a:3e:a5:14:48:00:09:d1:2c:cd:fc: 79:8e:77:7c:b5:2d:94:c8:90:75:9a:98:d6:c4:8d:a2:6c:9f: f3:70:81:2c:7f:79:57:1a:0b:14:60:98:f5:c0:47:c5:2a:c5: ae:d0:32:1c:bd:0f:92:c3:ed:bc:5c:e8:11:ed:a9:91:27:de: d3:41:f1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB+2wvzhWWxsSk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YTQ3NWE0ODItNjU4Mi00MWMzLTgyNmEtYTYxYTc1MTM3Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03YPzOQ7ofmc1pj9ecjKH/lUQacKdXBnDYAw VkQ+J7jJJfamEt7cGdWC8LVt0oLWUHRtOZcpmzkwcr8aYYQEzI5s9PF71ceyXQj7 7eFpBHoRzA9XWnhsrGT8L5m1sXL9WGIlFR3vBoMJEMmCODZ7xICpUQt2wEeBHZi3 k/NAP43E7DhooL6kWNen9Kl3pffAlRuXYH/0VfnxlZdXBNH1lgNTioYxYeX/j2+k fQ6tHYi62xpdIkn1A4zmk9KmpxJ+86Z1xU9w97RZLTVX56Y6OJYPIGkHkwS0JcsN R0/V89k2hzK4IojsjNtfdNkmRAatWKAPDFm/cTn8dhRlBlIIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8YJX69SMp/rZE0ENn6ZIwkXup6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2M1YmI5ZTUtMTdjMC0z YjllLTllYWYtZjM4OGM1ODQ0ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa6z0RxWRpMN91ZRrM6z7SVh/orV08XXfBFYV7FxVNGSv4lp3n4KBip XGAejBRzp5GggI7qokQ7jfuoAwq5kOX6yzYqmErzSlgzlGais66WT/3ncQGjgrvR X3lTPH4n4JiTTZvSYuRKM8VRUQUz8F9hv8j+xQytSAmWKSgoOXr2+0919Jyi7Jbr 9gZPC7Ke42puDSqm0mLpIwzpepHBHUkSfRYYIgNeJPq2aiEXkJMuSCQcD5W8wzKz eeQKPqUUSAAJ0SzN/HmOd3y1LZTIkHWamNbEjaJsn/NwgSx/eVcaCxRgmPXAR8Uq xa7QMhy9D5LD7bxc6BHtqZEn3tNB8cA= -----END CERTIFICATE-----Generated at Sun Oct 4 22:23:56 2026 by rpki-client